Suspicious
Suspect

Share on LinkedIn
Print
ZIP Archive
MD5:
Size: 0 B
application/zip

The file ea1b79e4ad6a58619a3e355b5ef4f7d8 is a ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 41 embedded or derived files. It matches 5 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
—
MD5
-
Verdict
Inconclusive
File type
ZIP Archive

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
ZIP archive

42 files
ZIPea1b79e4ad6a58619a3e355b5ef4f7d8

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #10 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11 URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #12 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #16 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #18 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #19 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #21 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #22 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #23 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #24 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #25 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #26 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #27 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #28 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #29 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #30 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #31 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #32 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #33 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #34 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #35 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #36 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #37 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #38 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #39 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #40 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #41 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #42 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #43 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #44 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #45 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #46 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #47 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #48 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #49 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #50 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #51 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #52 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #53 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #54 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #55 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #56 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #57 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #58 URIsuspect
httphuhuhuhuhuhuhu
URLs in VB Code - #59 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #60 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #61 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #62 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #63 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #64 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #65 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #66 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #67 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #68 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #69 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #70 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #71 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #72 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #73 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #74 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #75 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #76 URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #77 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #78 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #79 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #80 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #81 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #82 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #83 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #84 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #85 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #86 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #87 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #88 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #89 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #90 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #91 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #92 URIsuspect
https:huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙